Skip to content
OpenAdvisories

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Affected products

VendorProductAffectedFixed
pyasn1 pyasn1 < 0.6.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 pyasn1 0.6.2-1 —
Debian 13 pyasn1 0.6.1-1+deb13u1 DSA-6114-1
Debian 12 pyasn1 0.4.8-3+deb12u1 DSA-6114-1
Debian 11 pyasn1 0.4.8-1+deb11u1 DLA-4463-1
ReleasePackageFixed inAdvisory
Ubuntu 25.10 pyasn1 0.6.1-1ubuntu0.1 —
Ubuntu 24.04 LTS pyasn1 0.4.8-4ubuntu0.1 —
Ubuntu 22.04 LTS pyasn1 0.4.8-1ubuntu0.1 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS pyasn1 0.4.2-3ubuntu0.20.04.1~esm1 —
Ubuntu Pro 18.04 LTS pyasn1 0.4.2-3ubuntu0.18.04.1~esm1 —
Ubuntu Pro 16.04 LTS pyasn1 0.1.9-1ubuntu0.1~esm1 —
Ubuntu Pro 14.04 LTS pyasn1 0.1.7-1ubuntu2.1+esm1 —
ReleasePackageFixed inAdvisory
RHEL 10 fence-virt +55 4.16.0-13.el10_1.2 RHSA-2026:1905
RHEL 10 python-pyasn1 +2 0.6.2-1.el10_1 RHSA-2026:3354
RHEL 9 fence-virt +56 4.10.0-98.el9_7.5 RHSA-2026:1903
RHEL 9 python-pyasn1 +2 0.4.8-7.el9_7 RHSA-2026:3359
RHEL 8 fence-agents +48 4.2.1-129.el8_10.21 RHSA-2026:1906
RHEL 8 python-pyasn1 +2 0.3.7-6.el8_10.1 RHSA-2026:4146
RHEL 8 resource-agents +3 4.9.0-54.el8_10.28 RHSA-2026:1904
RHEL 7 resource-agents +2 4.1.1-61.el7_9.23 RHSA-2026:2758
Show 23 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Sap Hana Els 7 resource-agents +1 4.1.1-61.el7_9.23 RHSA-2026:2758
Red Hat Rhel Extras Sap Hana Els 7 resource-agents-sap-hana-scaleout 0.164.0-6.el7_9.23 RHSA-2026:2758
Red Hat Rhel Extras Sap Els 7 resource-agents +1 4.1.1-61.el7_9.23 RHSA-2026:2758
Red Hat Rhel Extras Sap Els 7 sap-cluster-connector 3.0.1-37.el7_9.23 RHSA-2026:2758
RHEL 10.0 EUS fence-virt +55 4.16.0-5.el10_0.8 RHSA-2026:2309
RHEL 10.0 EUS python-pyasn1 +2 0.6.2-1.el10_0.1 RHSA-2026:4138
RHEL 9.6 EUS fence-virt +56 4.10.0-86.el9_6.15 RHSA-2026:2299
RHEL 9.6 EUS python-pyasn1 +2 0.4.8-6.el9_6.1 RHSA-2026:4141
RHEL 9.4 EUS fence-virt +56 4.10.0-62.el9_4.22 RHSA-2026:2302
RHEL 9.4 EUS python-pyasn1 +2 0.4.8-6.el9_4.1 RHSA-2026:4143
RHEL 9.2 E4S fence-virt +56 4.10.0-43.el9_2.19 RHSA-2026:2300
RHEL 9.2 E4S python-pyasn1 +2 0.4.8-6.el9_2.1 RHSA-2026:4142
RHEL 9.0 E4S fence-virt +57 4.10.0-20.el9_0.28 RHSA-2026:2303
RHEL 9.0 E4S python-pyasn1 +2 0.4.8-6.el9_0.1 RHSA-2026:4140
RHEL 8.8 TUS fence-agents +46 4.2.1-112.el8_8.16 RHSA-2026:2221
RHEL 8.8 TUS python-pyasn1 +2 0.3.7-6.el8_8.1 RHSA-2026:4139
RHEL 8.8 TUS resource-agents +3 4.9.0-40.el8_8.16 RHSA-2026:2460
RHEL 8.8 E4S fence-agents +47 4.2.1-112.el8_8.16 RHSA-2026:2221
RHEL 8.8 E4S python-pyasn1 +2 0.3.7-6.el8_8.1 RHSA-2026:4139
RHEL 8.8 E4S resource-agents +3 4.9.0-40.el8_8.16 RHSA-2026:2460
RHEL 8.6 TUS fence-agents +46 4.2.1-89.el8_6.21 RHSA-2026:2486
RHEL 8.6 TUS python-pyasn1 +2 0.3.7-6.el8_6.1 RHSA-2026:4144
RHEL 8.6 TUS resource-agents +3 4.9.0-16.el8_6.20 RHSA-2026:2453
RHEL 8.6 E4S fence-agents +47 4.2.1-89.el8_6.21 RHSA-2026:2486
RHEL 8.6 E4S python-pyasn1 +2 0.3.7-6.el8_6.1 RHSA-2026:4144
RHEL 8.6 E4S resource-agents +3 4.9.0-16.el8_6.20 RHSA-2026:2453
RHEL 8.6 AUS fence-agents +42 4.2.1-89.el8_6.21 RHSA-2026:2486
RHEL 8.6 AUS python-pyasn1 +2 0.3.7-6.el8_6.1 RHSA-2026:4144
RHEL 8.4 EUS Long Life fence-agents +42 4.2.1-65.el8_4.27 RHSA-2026:2483
RHEL 8.4 EUS Long Life python-pyasn1 +2 0.3.7-6.el8_4.1 RHSA-2026:4147
RHEL 8.4 EUS Long Life resource-agents +2 4.1.1-90.el8_4.23 RHSA-2026:2712
RHEL 8.4 AUS fence-agents +45 4.2.1-65.el8_4.27 RHSA-2026:2483
RHEL 8.4 AUS python-pyasn1 +2 0.3.7-6.el8_4.1 RHSA-2026:4147
RHEL 8.4 AUS resource-agents +2 4.1.1-90.el8_4.23 RHSA-2026:2712
RHEL 8.2 AUS python-pyasn1 +2 0.3.7-6.el8_2.1 RHSA-2026:4145
RHEL 7 ELS python-pyasn1 +2 0.1.9-7.el7_9.2 RHSA-2026:4148
Red Hat Openshift Ironic 4 python-pyasn1 +3 0.5.1-4.el9 RHSA-2026:17595, RHSA-2026:17446
Red Hat OpenStack 17 python-pyasn1 +2 0.4.6-5.el8ost RHSA-2026:28042
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.1.el8ost RHSA-2026:54757
Red Hat OpenStack 16 erlang +20 23.3.4.18-2.el8ost RHSA-2026:54757
Red Hat OpenStack 16 etcd 3.3.23-22.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-oslo-messaging +1 10.2.4-2.20260710155333.82281a0.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-pyasn1 +2 0.4.6-4.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-glance +1 1:19.0.5-2.20260512165254.eb6ad61.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-keystone +1 1:16.0.3-2.20260616134936.9d699a7.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-nova +11 1:20.6.2-2.20260317135026.8a24acd.el8ost RHSA-2026:54757
Red Hat OpenShift 4 podman +6 5:5.2.2-11.rhaos4.18.el8 RHSA-2026:17595, RHSA-2026:17446
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.6.3-4.el8ap RHSA-2026:13512, RHSA-2026:13508, RHSA-2026:3959
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.6.26-1.el8ap RHSA-2026:13508, RHSA-2026:3959, RHSA-2026:3958
Red Hat Ansible Automation Platform Developer 2 python3.12-django 4.2.28-1.el8ap RHSA-2026:3959, RHSA-2026:3958
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.6.3-4.el8ap RHSA-2026:13512, RHSA-2026:13508, RHSA-2026:3959
Red Hat Ansible Automation Platform 2 automation-controller +4 4.6.26-1.el8ap RHSA-2026:13512, RHSA-2026:13508, RHSA-2026:3959
Red Hat Ansible Automation Platform 2 automation-gateway +2 2.5.20260225-1.el8ap RHSA-2026:13512, RHSA-2026:13508, RHSA-2026:3959
Red Hat Ansible Automation Platform 2 automation-gateway-proxy +1 2.5.10-5.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.6-1.el9ap RHSA-2026:13508, RHSA-2026:3958
Red Hat Ansible Automation Platform 2 python3.12-aiohttp 3.13.3-2.el8ap RHSA-2026:3959, RHSA-2026:3958
Red Hat Ansible Automation Platform 2 python3.12-django 4.2.28-1.el8ap RHSA-2026:3959, RHSA-2026:3958
Red Hat Ansible Automation Platform 2 python3.12-django-ansible-base +10 2.5.20260422-2.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-django-ansible-base+resource_registry 2.6.20260422-1.el9ap RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-jwcrypto 1.5.7-1.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-markdown 3.10.2-1.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-protobuf 5.29.6-1.el8ap RHSA-2026:3959, RHSA-2026:3958
Red Hat Ansible Automation Platform 2 python3.12-pyOpenSSL 26.0.0-1.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-pyasn1 0.6.3-1.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 python3.12-pyjwt +1 2.12.1-1.el8ap RHSA-2026:13512, RHSA-2026:13508
Red Hat Ansible Automation Platform 2 receptor +1 1.6.3-4.el8ap RHSA-2026:13512, RHSA-2026:13508, RHSA-2026:3959

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 fence-agents-apc +35 4.16.0-13.el10_1.2 ALSA-2026:1905
AlmaLinux 10 python3-pyasn1 +1 0.6.2-1.el10_1 ALSA-2026:3354
AlmaLinux 9 fence-virt +55 4.10.0-98.el9_7.5 ALSA-2026:1903
AlmaLinux 9 python3-pyasn1 +1 0.4.8-7.el9_7 ALSA-2026:3359
AlmaLinux 8 fence-agents-all +47 4.2.1-129.el8_10.21 ALSA-2026:1906
AlmaLinux 8 python3-pyasn1 +1 0.3.7-6.el8_10.1 ALSA-2026:4146
AlmaLinux 8 resource-agents +3 4.9.0-54.el8_10.28 ALSA-2026:1904

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 fence-agents 4.16.0-13.el10_1.2 RLSA-2026:1905
Rocky Linux 10 python-pyasn1 0.6.2-1.el10_1 RLSA-2026:3354
Rocky Linux 9 fence-agents 4.10.0-98.el9_7.5 RLSA-2026:1903
Rocky Linux 9 python-pyasn1 0.4.8-7.el9_7 RLSA-2026:3359
Rocky Linux 8 fence-agents 4.2.1-129.el8_10.21 RLSA-2026:1906
Rocky Linux 8 python-pyasn1 0.3.7-6.el8_10.1 RLSA-2026:4146
Rocky Linux 8 resource-agents 4.9.0-54.el8_10.28 RLSA-2026:1904
ReleasePackageFixed inAdvisory
SLES 15 SP7 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1
SLES 15 SP6 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES 15 SP5 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES 15 SP4 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES 12 SP5 python-pyasn1 0.1.9-4.11.1 SUSE-SU-2026:0300-1
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python-pyasn1 0.5.0-150400.12.10.1 SUSE-SU-2026:0252-1
SLES for SAP 16.0 python-pyasn1 0.6.1-160000.3.1 SUSE-SU-2026:20133-1
SLES for SAP 15 SP6 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES for SAP 15 SP5 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES for SAP 15 SP4 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLES 16.0 python-pyasn1 0.6.1-160000.3.1 SUSE-SU-2026:20133-1
SLE Micro 6.2 python-pyasn1 0.6.1-160000.3.1 SUSE-SU-2026:20158-1
SLE Micro 6.1 python-pyasn1 0.5.0-slfo.1.1_2.1 SUSE-SU-2026:20482-1
SLE Micro 6.0 python-pyasn1 0.5.0-3.1 SUSE-SU-2026:20447-1
SLE Micro 5.5 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1
SLE Micro 5.4 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1
SLE Micro 5.3 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1
SLE Micro 5.2 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1
SLE HPC 15 SP5 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
SLE HPC 15 SP4 python-pyasn1 0.4.2-150000.3.13.1 SUSE-SU-2026:0430-1, SUSE-SU-2026:0252-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-pyasn1 0.6.2-1.1 openSUSE-SU-2026:10078-1
openSUSE Leap 16.0 python-pyasn1 0.6.1-160000.3.1 openSUSE-SU-2026:20089-1
openSUSE Leap 15.6 python-pyasn1 0.5.0-150400.12.10.1 SUSE-SU-2026:0252-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3-pyasn1 +2 0.4.8-4.amzn2023.0.3 ALAS2023-2026-1417
Amazon Linux 2 python2-pyasn1 +3 0.1.9-7.amzn2.0.3 ALAS2-2026-3148

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 fence-virt +51 4.16.0-13.el10_1.2 ELSA-2026-1905
Oracle Linux 10 python3-pyasn1 +1 0.6.2-1.el10_1 ELSA-2026-3354
Oracle Linux 9 fence-virt +54 4.10.0-98.el9_7.5 ELSA-2026-1903
Oracle Linux 9 python3-pyasn1 +1 0.4.8-7.el9_7 ELSA-2026-3359
Oracle Linux 8 fence-agents-all +41 4.2.1-129.el8_10.21 ELSA-2026-1906
Oracle Linux 8 python3-pyasn1 +1 0.3.7-6.el8_10.1 ELSA-2026-4146
Oracle Linux 8 resource-agents 4.9.0-54.el8_10.28 ELSA-2026-1904
Oracle Linux 7 python2-pyasn1 +1 0.1.9-7.0.1.el7 ELSA-2026-4148

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling airflow-3 3.1.6-r2 —
Wolfi rolling dask-kubernetes 2025.7.0-r6 —
Wolfi rolling k8s-sidecar 2.4.0-r0 —
Wolfi rolling katib-earlystopping 0.19.0-r4 —
Wolfi rolling kserve-storage-controller 0.16.0-r9 —
Wolfi rolling kubeflow-jupyter-web-app 1.10.0-r10 —
Wolfi rolling kubeflow-pipelines-apiserver 2.15.0-r9 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.15.0-r4 —
Wolfi rolling kubeflow-volumes-web-app 1.10.0-r9 —
Wolfi rolling open-webui 0.7.2-r1 —
Wolfi rolling py3-cassandra-medusa 0.27.0-r2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pyasn1 >= 0.6.1, < 0.6.2 0.6.2 GHSA-63vm-454h-vhhq

Advisories 50

References